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WORKMAN NYDEGGER/MICROSOFT 
1000 EAGLE GATE TOWER 
60 EAST SOUTH TEMPLE 
SALT LAKE CITY, UT 841 1 1 



HAILU, TESHOME 



PAPER NUMBER 



DATE MAILED: 12/30/2009 



| APPUICATIONNO. | FIUING DATE J FIRST NAMED INVENTOR | ATTORNEY DOCKET NO. | CONFIRMATION NO. | 

10/769,104 01/30/2004 Catalin D. Sandu 13768.1268 9006 

TITLE OF INVENTION: SYSTEM AND METHOD FOR DETECTING MALWARE IN EXECUTABLE SCRIPTS ACCORDING TO ITS 
FUNCTIONALITY 

| APPUN. TYPE | SMALL ENTITY | ISSUE FEE DUE | PUBLICATION FEE DUE | PREV. PAID ISSUE FEE | TOTAL FEEfS; DUE | DATE DUE j 

nonprovisional NO $1510 $300 $0 $1810 03/30/2010 

THE APPLICATION IDENTIFIED ABOVE HAS BEEN EXAMINED AND IS ALLOWED FOR ISSUANCE AS A PATENT. 
PROSECUTION ON THE MERITS JS CLOSED . THIS NOTICE OF ALLOWANCE IS NOT A GRANT OF PATENT RIGHTS. 
THIS APPLICATION IS SUBJECT TO WITHDRAWAL FROM ISSUE AT THE INITIATIVE OF THE OFFICE OR UPON 
PETITION BY THE APPLICANT. SEE 37 CFR 1.313 AND MPEP 1308. 

THE ISSUE FEE AND PUBLICATION FEE (IF REQUIRED) MUST BE PAID WITHIN THREE MONTHS FROM THE 
MAILING DATE OF THIS NOTICE OR THIS APPLICATION SHALL BE REGARDED AS ABANDONED. THIS 
STATUTORY PERIOD CANNOT BE EXTENDED . SEE 35 U.S.C. 151. THE ISSUE FEE DUE INDICATED ABOVE DOES 
NOT REFLECT A CREDIT FOR ANY PREVIOUSLY PAID ISSUE FEE IN THIS APPLICATION. IF AN ISSUE FEE HAS 
PREVIOUSLY BEEN PAID IN THIS APPLICATION (AS SHOWN ABOVE), THE RETURN OF PART B OF THIS FORM 
WILL BE CONSIDERED A REQUEST TO REAPPLY THE PREVIOUSLY PAID ISSUE FEE TOWARD THE ISSUE FEE NOW 
DUE. 



HOW TO REPLY TO THIS NOTICE: 

I. Review the SMALL ENTITY status shown above. 

If the SMALL ENTITY is shown as YES, verify your current 
SMALL ENTITY status: 

A. If the status is the same, pay the TOTAL FEE(S) DUE shown 
above. 

B. If the status above is to be removed, check box 5b on Part B - 
Fee(s) Transmittal and pay the PUBLICATION FEE (if required) 
and twice the amount of the ISSUE FEE shown above, or 



If the SMALL ENTITY is shown as NO: 



A. Pay TOTAL FEE(S) DUE shown above, or 



B. If applicant claimed SMALL ENTITY status before, or is now 
claiming SMALL ENTITY status, check box 5a on Part B - Fee(s) 
Transmittal and pay the PUBLICATION FEE (if required) and 1/2 
the ISSUE FEE shown above. 



II. PART B - FEE(S) TRANSMITTAL, or its equivalent, must be completed and returned to the United States Patent and Trademark Office 
(USPTO) with your ISSUE FEE and PUBLICATION FEE (if required). If you are charging the fee(s) to your deposit account, section "4b" 
of Part B - Fee(s) Transmittal should be completed and an extra copy of the form should be submitted. If an equivalent of Part B is filed, a 
request to reapply a previously paid issue fee must be clearly made, and delays in processing may occur due to the difficulty in recognizing 
the paper as an equivalent of Part B. 

III. All communications regarding this application must give the application number. Please direct all communications prior to issuance to 
Mail Stop ISSUE FEE unless advised to the contrary. 

IMPORTANT REMINDER: Utility patents issuing on applications filed on or after Dec. 12, 1980 may require payment of 
maintenance fees. It is patentee's responsibility to ensure timely payment of maintenance fees when due. 
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PARTE 

Complete and send this form, together with applicable 



FEE(S) TRANSMITTAL 

fee(s), to: Mail Mail Stop ISSUE FEE 

Commissioner for Patents 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
or Fax (571)-273-2885 



d otherwise in Block 1. by (; 



E FEE and PUBLICATION FEE 
ders and notification of matntenaiu 
) specifying a new corresponds 



required). Blocks 1 through 5 should he completed whf 
nee rees will be mailed to the current correspondence address 
r address: and/or (b) indicating a separate "FEE ADDRESS" 1 



be used for domestic mailings of the 
>i be used for any other accompanying 
n assignment or formal drawing, must 



47973 7590 12/30/2009 

WORKMAN NYDEGGER/MICROSOFT 
1000 EAGLE GATE TOWER 
60 EAST SOUTH TEMPLE 



feels) Transmittal. This certificate c 
papers. Each additional paper, such 
have its own certificate of mailing or 

Certificate of Mailing or Transmission 

1 hereby certify that thi 1 eel s ) Transmittal i I in dep. i I with the United 
Male-. Postal Sen ice w ith sufficient postage for first class mail in an envelope 
addressed to the Mail Stop ISSI1. 1 hi . address abo\e. or beina facsimile 
transmitted to the USPTO (571) 273-2885, on the date indicated below. 



SALT LAKE CITY, UT 841 1 1 








| APPLICATION NO. | FILING DATE j FIRST NAMED INVENTOR | ATTORNEY DOCKET NO. | CONFIRMATION NO. 



10/769,104 01/30/2004 Catalin D. Sandu 13768.1268 9006 

TITLE OF INVENTION: SYSTEM AND METHOD FOR DETECTING MALWARE IN EXECUTABLE SCRIPTS ACCORDING TO ITS 
FUNCTIONALITY 



APPLN. TYPE 



SMALL ENTITY 



ISSUE FEE DUE 



)UE I PREV. PAID ISSUE FEE TOTAL FLLIS ) DI Hi 



II \ MIOMI 



CFR 1.363). 

□ c 



ii- indication of "Ire Address" (37 



sB/47: 1 



CLASS-SUBCLASS 



2. For printing on the patent front page, list 



(2) the name of a single firm (h 
registered attorney or agent) an< 
2 registered patent attorneys or 
listed, no name will be printed. 



s. If n. 



3. ASSIGNEE NAME AM) RESIDENCE DATA TO BE PRINTED ON THE PATENT (print or type) 
PLEASE NO 
recordation as 

(A) NAME OF ASSIGNEE (B) RESIDENCE: (CITY and STATE OR COUNTRY) 



Please check the appropriate assignee category or categories (will not be printed on the patent) : Q Individual Q Corporation or oilier private group entity Q Government 

4a. The following fee(s) are submitted: 4b. Payment of Fee(s ): (Please first reapply any previously paid issue fee shown above) 

Q Issue Fee J A check is enclosed. 

□ Publication Fee (No small entity discount permitted) □ Payment by credit card. Form PTO-2038 is attached. 

Q Advance Order - # of Copies 



overpayment, to Deposit Account Number _ 



5. Change in Entity Status (from status indicated above! 

□ a. Applicant claims SMALL ENTITY status. See 37 CFR 1.27. □ b. Applicant is no longer claiming SMALL ENTITY status. See 37 CFR 1.27(g)(2). 



ir the assignee or other parly in 



Authorized Signature 
Typed or printed name _ 



This collection of in lot mat ion i ; required by 37 CFR 1 .3 I I . The information is required lo obtain or retain a benefit by the public which is to file (and by the I 'SPTO to process) 
an application. ( 'onfidenlialily is gov erned by 3.^ L.S.C. I 22 and 37 CI R 1 . 14. This collection is estimated I.) take 12 minutes to complete, inc hiding gathering, preparing, and 

submitting the compl i d pplicati n I ml th LSPI'O him ill i I | ndin n nil individual n mm nl nth H I m ' quire to complete 

this form and/or susseslions for reducine this burden, should be senl lo the ( 'fuel Information officer. I .S. Patent and Trademark Office. I .S. Department of Commerce. P.O. 
!,< 1450. Alexandra. Vireini 2.* I ! J| DO NOT SEND FEES OR COMPLETED FORMS TO Till vDDRI-S d I) TO: . itimi ner lor Paten P.O. B 1450 
Alexandria. Virginia 22313-1450. 

Under the Paperwork Reduction Act of f 995, no persons are required to respond to a collection of information unless it displays a valid OMB control number. 



PTOL-85 (Rev. 08/07) Approved for use through 08/3 1/2010. 



OMB 0651-0033 U.S. Patent and Trademark Office: U.S. DEPARTMENT OF COMMERCE 



APPLICATION NO. | FILING DATE j FIRST NAMED INVENTOR | ATTORNEY DOCKET NO. | CONFIRMATION NO. 

10/769,104 01/30/2004 Catalin D. Sandu 13768.1268 9006 

47973 7590 12/30/2009 I EXAMINER 

WORKMAN NYDEGGER/MICROSOFT hailu, teshome 

1000 EAGLE GATE TOWER j art unit ] paper number 

60 EAST SOUTH TEMPLE 1 — 1 

SALT LAKE CITY, UT 841 1 1 DAJE 12/30/2009 



Determination of Patent Term Adjustment under 35 U.S.C. 154 (b) 

(application filed on or after May 29, 2000) 

The Patent Term Adjustment to date is 611 day(s). If the issue fee is paid on the date that is three months after the 
mailing date of this notice and the patent issues on the Tuesday before the date that is 28 weeks (six and a half 
months) after the mailing date of this notice, the Patent Term Adjustment will be 61 1 day(s). 

If a Continued Prosecution Application (CPA) was filed in the above-identified application, the filing date that 
determines Patent Term Adjustment is the filing date of the most recent CPA. 

Applicant will be able to obtain more detailed information by accessing the Patent Application Information Retrieval 
(PAIR) WEB site (http://pair.uspto.gov). 

Any questions regarding the Patent Term Extension or Adjustment determination should be directed to the Office of 
Patent Legal Administration at (571)-272-7702. Questions relating to issue and publication fee payments should be 
directed to the Customer Service Center of the Office of Patent Publication at l-(888)-786-0101 or 
(571)-272-4200. 
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Application No. 



Applicant(s) 



Interview Summary 



10/769,104 



SANDU ET AL. 



Examiner 



Art Unit 



TESHOME HAILU 



2434 



All participants (applicant, applicant's representative, PTO personnel): 



(1) Teshome Hailu . 



(3) - 



(2) Jens C. Jenkins (Reg. No. 44,803) . 



(4) ■ 



Date of Interview: 17 December 2009 . 

Type: a)^ Telephonic Video Conference 

c)D Personal [copy given to: 1)D applicant 2)D applicant's representative] 

Exhibit shown or demonstration conducted: d)Q Yes e)^ No. 
If Yes, brief description: . 

Claim(s) discussed: 1_. 

Identification of prior art discussed: None . 

Agreement with respect to the claims f)D was reached. g)D was not reached. h)D N/A. 



Substance of Interview including description of the general nature of what was agreed to if an agreement was 
reached, or any other comments: Examiner called applicant representative (Jens C. Jenkins) and discussed the claim 
1. During the interview, examiner mentioned the repetition of comparison module in claim 1 and applicant 
representative authorized the examiner to write examiner amendment . 

(A fuller description, if necessary, and a copy of the amendments which the examiner agreed would render the claims 
allowable, if available, must be attached. Also, where no copy of the amendments that would render the claims 
allowable is available, a summary thereof must be attached.) 

THE FORMAL WRITTEN REPLY TO THE LAST OFFICE ACTION MUST INCLUDE THE SUBSTANCE OF THE 
INTERVIEW. (See MPEP Section 713.04). If a reply to the last Office action has already been filed, APPLICANT IS 
GIVEN A NON-EXTENDABLE PERIOD OF THE LONGER OF ONE MONTH OR THIRTY DAYS FROM THIS 
INTERVIEW DATE, OR THE MAILING DATE OF THIS INTERVIEW SUMMARY FORM, WHICHEVER IS LATER, TO 
FILE A STATEMENT OF THE SUBSTANCE OF THE INTERVIEW. See Summary of Record of Interview 
requirements on reverse side or on attached sheet. 
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Summary of Record of Interview Requirements 



Manual of Patent Examining Procedure (MPEP), Section 713.04, Substance of Interview Must be Made of Record 

A complete written statement as to the substance of any face-to-face, video conference, or telephone interview with regard to an application must be made of record in the 
application whether or not an agreement with the examiner was reached at the interview. 

Title 37 Code of Federal Regulations (CFR) § 1.133 Interviews 
Paragraph (b) 

In every instance where reconsideration is requested in view of an interview with an examiner, a complete written statement of the reasons presented at the interview as 
warranting favorable action must be filed by the applicant. An interview does not remove the necessity for reply to Office action as specified in §§ 1 .1 1 1, 1 .135. (35 U.S.C. 132) 



37 CFR §1 .2 Business to be transacted in writing. 
All business with the Patent or Trademark Office should be transacted in writing. The personal attendance of applicants or their attorneys or agents at the Patent and 
Trademark Office is unnecessary. The action of the Patent and Trademark Office will be based exclusively on the written record in the Office. No attention will be paid to 
any alleged oral promise, stipulation, or understanding in relation to which there is disagreement or doubt. 



The action of the Patent and Trademark Office cannot be based exclusively on the written record in the Office if that record is itself 
incomplete through the failure to record the substance of interviews. 

It is the responsibility of the applicant or the attorney or agent to make the substance of an interview of record in the application file, unless 
the examiner indicates he or she will do so. It is the examiner's responsibility to see that such a record is made and to correct material inaccuracies 
which bear directly on the question of patentability. 

Examiners must complete an Interview Summary Form for each interview held where a matter of substance has been discussed during the 
interview by checking the appropriate boxes and filling in the blanks. Discussions regarding only procedural matters, directed solely to restriction 
requirements for which interview recordation is otherwise provided for in Section 812.01 of the Manual of Patent Examining Procedure, or pointing 
out typographical errors or unreadable script in Office actions or the like, are excluded from the interview recordation procedures below. Where the 
substance of an interview is completely recorded in an Examiners Amendment, no separate Interview Summary Record is required. 

The Interview Summary Form shall be given an appropriate Paper No., placed in the right hand portion of the file, and listed on the 
"Contents" section of the file wrapper. In a personal interview, a duplicate of the Form is given to the applicant (or attorney or agent) at the 
conclusion of the interview. In the case of a telephone or video-conference interview, the copy is mailed to the applicant's correspondence address 
either with or prior to the next official communication. If additional correspondence from the examiner is not likely before an allowance or if other 
circumstances dictate, the Form should be mailed promptly after the interview rather than with the next official communication. 

The Form provides for recordation of the following information: 

- Application Number (Series Code and Serial Number) 

- Name of applicant 

- Name of examiner 

- Date of interview 

- Type of interview (telephonic, video-conference, or personal) 

- Name of participant(s) (applicant, attorney or agent, examiner, other PTO personnel, etc.) 

- An indication whether or not an exhibit was shown or a demonstration conducted 

- An identification of the specific prior art discussed 

- An indication whether an agreement was reached and if so, a description of the general nature of the agreement (may be by 
attachment of a copy of amendments or claims agreed as being allowable). Note: Agreement as to allowability is tentative and does 
not restrict further action by the examiner to the contrary. 

- The signature of the examiner who conducted the interview (if Form is not an attachment to a signed Office action) 

It is desirable that the examiner orally remind the applicant of his or her obligation to record the substance of the interview of each case. It 
should be noted, however, that the Interview Summary Form will not normally be considered a complete and proper recordation of the interview 
unless it includes, or is supplemented by the applicant or the examiner to include, all of the applicable items required below concerning the 
substance of the interview. 

A complete and proper recordation of the substance of any interview should include at least the following applicable items: 

1) A brief description of the nature of any exhibit shown or any demonstration conducted, 

2) an identification of the claims discussed, 

3) an identification of the specific prior art discussed, 

4) an identification of the principal proposed amendments of a substantive nature discussed, unless these are already described on the 
Interview Summary Form completed by the Examiner, 

5) a brief identification of the general thrust of the principal arguments presented to the examiner, 

(The identification of arguments need not be lengthy or elaborate. A verbatim or highly detailed description of the arguments is not 
required. The identification of the arguments is sufficient if the general nature or thrust of the principal arguments made to the 
examiner can be understood in the context of the application file. Of course, the applicant may desire to emphasize and fully 
describe those arguments which he or she feels were or might be persuasive to the examiner.) 

6) a general indication of any other pertinent matters discussed, and 

7) if appropriate, the general results or outcome of the interview unless already described in the Interview Summary Form completed by 
the examiner. 

Examiners are expected to carefully review the applicant's record of the substance of an interview. If the record is not complete and 
accurate, the examiner will give the applicant an extendable one month time period to correct the record. 

Examiner to Check for Accuracy 

If the claims are allowable for other reasons of record, the examiner should send a letter setting forth the examiner's version of the 
statement attributed to him or her. If the record is complete and accurate, the examiner should place the indication, "Interview Record OK" on the 
paper recording the substance of the interview along with the date and the examiner's initials. 



